Archive
March 2021
Vulnerabilities first published in this month (UTC), newest first.
1,455 results · Feed
-
Unscored —
In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the …
-
Unscored —
xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated stri…
-
Unscored —
An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resul…
-
Unscored —CVE-2021-0399 Public exploit
In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to loc…
-
Unscored —CVE-2021-0392 Public exploit
In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of…
-
Unscored —CVE-2021-0390 Public exploit
In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to…
-
Unscored —CVE-2021-0397 Public exploit
In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead t…
-
Unscored —
In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. Th…
-
Unscored —CVE-2021-0391 Public exploit
In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, witho…
-
Unscored —CVE-2021-0394 Public exploit
In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing boun…
-
Unscored —
In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could …
-
Unscored —CVE-2021-0393 Public exploit
In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflo…
-
Unscored —CVE-2021-0396 Public exploit
In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bound…
-
Unscored —
A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a …
-
Medium 5.3
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the sy…
-
Medium 6.2
A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permissi…
-
Unscored —
A request-validation issue was discovered in Open5GS 2.1.3 through 2.2.x before 2.2.1. The WebUI component allows an un…
-
Unscored —
Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post ti…
-
Medium 4.7
SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.3…
-
Unscored —
A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter.
-
Unscored —
FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page via a post ID to /pag…
-
Unscored —
FUEL CMS 1.4.8 allows SQL injection via the 'fuel_replace_id' parameter in pages/replace/1. Exploiting this issue could…
-
Unscored —
An issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to obtain super admin privi…
-
Unscored —
An issue was discovered in FUEL CMS V1.4.7. An attacker can use a XSS payload and bypass a filter via /fuelCM/fuel/page…
-
Unscored —
Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in register.php through the name parameter.
-
Unscored —
Stored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows re…
-
Unscored —
Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Se…
-
Unscored —
Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative pri…
-
Unscored —
Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to …
-
Unscored —
Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read …
-
Unscored —
Stored cross-site scripting vulnerability due to inadequate CSP (Content Security Policy) configuration in GROWI versio…
-
Unscored —
Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read …
-
High 8.8CVE-2020-13936 EPSS 23%
Velocity Sandbox Bypass
An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/mod…
-
Medium 6.1
Velocity Tools XSS Vulnerability
The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an XSS payload file as this vm file in the URL which results in this payload being executed. XSS v…
-
Unscored —CVE-2021-3310 Public exploit
Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can…
-
Unscored —
An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sens…
-
Unscored —
In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has consta…
-
High 8.1CVE-2021-21772 Public exploit
A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3m…
-
Unscored —
Twinkle Tray (aka twinkle-tray) through 1.13.3 allows remote command execution. A remote attacker may send a crafted IP…
-
Low 3.7CVE-2021-28116 EPSS 13%
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bo…